Analysis
-
max time kernel
534173s -
max time network
163s -
platform
android_x64 -
resource
android-x64-arm64-20230831-en -
resource tags
-
submitted
11-10-2023 10:48
General
-
Target
anubis.apk
-
Size
213KB
-
MD5
ba7b1ba0830e11da60dec1c90632515d
-
SHA1
b0a38160d78f9d0799c646d9f21ab65afb917202
-
SHA256
8cb941658ed8340b67a38a47162ab8850b89a14eee2899f0761fadd4f648fd5e
-
SHA512
b53be16ce325c094dd6c1188605b8abc1fbb7c085a4cacd9f9649d9fd4143e70ae9c49a718747f46860e0c3899704a8bd379c104107ad565fa6df980ba00d420
-
SSDEEP
3072:daC6U6a1PPE/387RpOnzy3fmhbGluwXK6boURb0gqJo0DK0z5StS:sB9a1PgMOnzhxGlZjb0n9DK00I
Score
8/10
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 2 IoCs
-
Removes its main activity from the application launcher 1 IoCs
-
Acquires the wake lock. 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes
-
wocwvy.czyxoxmbauu.slsa1⤵
- Makes use of the framework's Accessibility service.
- Removes its main activity from the application launcher
- Acquires the wake lock.
- Requests enabling of the accessibility settings.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Listens for changes in the sensor environment (might be used to detect emulation).